Privacy policy

Last updated: 11 October 2026. This policy explains what data is processed when you use HNarzędzia and why.

Controller

The controller is K&K INVESTMENTS SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, operating HNarzędzia under the HOXU brand. Registered office: Jana Heweliusza 11/811, 80-890 Gdańsk, Poland. KRS: 0001222292, NIP: 5833560168, REGON: 543917896. Contact for privacy matters: hello@hoxu.pl.

Data entered into tools

Our tools process the text, numbers, and files you select directly in your browser. The site does not receive this data or these files. You do not need an account or need to provide personal data to use the tools.

Some tools download code or a model from jsDelivr, Google Cloud Storage, or Hugging Face when first used. The provider may receive technical connection data such as your IP address, browser information, and the requested resource URL. The file you select for processing is not sent to these services. The legal basis is our legitimate interest in providing the selected tool feature (Article 6(1)(f) GDPR).

Technical data and Cloudflare Web Analytics

Cloudflare delivers this site. It processes connection data, including your IP address, requested page, connection time, and technical browser information, to deliver and secure the site. The legal basis is our legitimate interest in operating and protecting the site (Article 6(1)(f) GDPR). Cloudflare retains this data under the settings and retention rules of its service.

We also use Cloudflare Web Analytics (RUM) to measure page performance, including Core Web Vitals and load times. The beacon sends Cloudflare browser measurements, the page URL, and the referring page. Cloudflare says the beacon does not store or access cookies, localStorage, sessionStorage, or IndexedDB, and that it discards the received IP address at the nearest data center. The data is not used to track people across websites. The legal basis is our legitimate interest in monitoring and improving the site (Article 6(1)(f) GDPR). Cloudflare retains unsampled measurements for 7 days and then aggregates them; Web Analytics dashboard data is available for up to 6 months. See Cloudflare RUM documentation and its Web Analytics retention information.

Browser storage and cookies

Your browser may remember your theme, stopwatch state, and invoice-generator settings. The invoice tool stores seller details such as name, address, tax number (NIP), bank account, and last invoice number in localStorage on your device. Remove these data with the “Clear data” button in the invoice tool or in your browser settings. Buyer details and invoice items are used only while creating the document and are not saved by the site. Some tools cache downloaded libraries, models, or language data in browser storage; OCR may also save language data in IndexedDB. These cached resources are not your documents or recognized text. The site code does not use cookies for advertising or analytics, and Cloudflare RUM does not use browser storage.

Providers and international transfers

Recipients of technical data are Cloudflare and, when a tool downloads a model or library, the relevant provider: jsDelivr, Google, or Hugging Face. Email is also handled by the sender's and administrator's email providers. These services may operate outside the European Economic Area. Cloudflare describes its transfer safeguards, including the EU-US Data Privacy Framework or Standard Contractual Clauses, in its GDPR information. Other providers' policies: jsDelivr, Google, and Hugging Face. If you follow a link to another website, its operator processes data under its own policy.

Email messages

If you email us, we process your email address and message to reply and handle the correspondence. Providing this information is voluntary, but necessary for us to reply. The legal basis is taking steps before entering a contract if you ask about one, or our legitimate interest in handling correspondence. We keep messages for as long as needed to resolve the matter, and afterward only as long as needed to establish, exercise, or defend legal claims.

Your rights

You may request access to, correction, deletion, or restriction of your personal data. Where processing is based on our legitimate interest, you may object. Where GDPR conditions are met, you may also request data portability. Contact us at hello@hoxu.pl. You may also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

Automated decisions

We do not make decisions about you with legal or similarly significant effects based solely on automated processing, and we do not profile users.